IAM Users, Groups & Roles

Identity Management

💡 IAM, EK, "OFFICE, BUILDING, ACCESS, SYSTEM" jaisa, hai — Users, EMPLOYEES, HAIN, (permanent, ID, card), Groups, DEPARTMENTS, HAIN, (same, access, level), aur, Roles, "VISITOR, BADGES", HAIN, JO, TEMPORARY, aur, TASK-SPECIFIC, HOTE, HAIN.

IAM, (Identity, and, Access, Management), CONTROL, karta hai, ki, KAUN, (authentication) AWS, resources, ko, KYA, KAR, sakta hai, (authorization). User, EK, PERMANENT, IDENTITY, hai, Group, USERS, ka, COLLECTION, hai.

Role, EK, TEMPORARY, IDENTITY, hai, JISE, KOI, bhi, "ASSUME", kar, sakta hai — jaise, EC2, instance, ya, DUSRA, AWS, account. Roles, ko, TEMPORARY, credentials, milte, HAIN, JO, AUTOMATICALLY, EXPIRE, ho, jaate, HAIN.

aws iam create-user --user-name john
aws iam create-group --group-name developers
aws iam add-user-to-group --user-name john --group-name developers

👤

IAM, EK, "OFFICE, BUILDING, ACCESS, SYSTEM" jaisa, hai — Users, EMPLOYEES, HAIN, (permanent, ID, card), Groups, DEPARTMENTS, HAIN, (same, access, level), aur, Roles, "VISITOR, BADGES", HAIN, JO, TEMPORARY, aur, TASK-SPECIFIC, HOTE, HAIN.

1 / 2

⚡ Quick Recap

User = permanent identity (person ya application)
Group = users ka collection, permissions ek saath manage karne ke liye
Role = temporary identity, EC2 aur cross-account access ke liye best

Is page mein (2 subtopics)

IAM, User, EK, PERMANENT, IDENTITY, hai, (EK, PERSON, ya, application), Group, USERS, ka, COLLECTION, hai, (permissions, EK, saath, MANAGE, karne, ke, liye), aur, Role, EK, TEMPORARY, IDENTITY, hai, JISE, KOI, bhi, "ASSUME", kar, sakta hai, (jaise, EC2, instance, ya, DUSRA, AWS, account).

💡Tip: Roles, ko, "TEMPORARY, CREDENTIALS" milte, HAIN, (expire, ho, jaate, HAIN) JABKI, Users, ke, PAAS, PERMANENT, credentials, HOTE, HAIN — ISLIYE, EC2, instances, ke, liye, HAMESHA, Roles, use, karo, hardcoded, User, keys, NAHI.

IAM, Roles, se, EK, AWS, account, ke, USERS, DUSRE, account, ke, RESOURCES, ko, ACCESS, kar, sakte, HAIN, — bina, PERMANENT, credentials, SHARE, kiye. "sts:AssumeRole" API, call, se, TEMPORARY, credentials, milte, HAIN, JO, EXPIRE, ho, jaate, HAIN.

aws sts assume-role --role-arn arn:aws:iam::123456789012:role/CrossAccountRole --role-session-name mysession

← Previous🤝 Shared Responsibility Model Next →📜 IAM Policies

Code10x

IAM Users, Groups & Roles

Users vs Groups vs Roles

Cross-Account Access with Roles